RE: New UDP port probed (36970)

["McGowan, Jeremy" <jmcgowan () globalspec com>]

Ares, which is a P2P Program,  most likely.

-Jeremy

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Tim
Sent: Saturday, December 09, 2006 9:51 PM
To: Walter C. Daugherity
Cc: incidents () securityfocus com
Subject: Re: New UDP port probed (36970)

Hello Walter,

> Today's log shows a new UDP port (36970) probed by
>
> 24.85.239.112
> 125.22.34.118
> 59.70.136.92
> 140.113.90.231
>
> etc., and I did not find that port in various lists of ports used by 
> viruses, Trojans, backdoors, etc.
>
> Anybody know what this is?

Is there any pattern to the source ports?

tim

------------------------------------------------------------------------
------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las
Vegas. 
World renowned security experts reveal tomorrow's threats today. Free of

vendor pitches, the Briefings are designed to be pragmatic regardless of
your 
security environment. Featuring 36 hands-on training courses and 10
conference 
tracks, networking opportunities with over 2,500 delegates from 40+
nations. 

http://www.blackhat.com
------------------------------------------------------------------------
------


------------------------------------------------------------------------------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas.
World renowned security experts reveal tomorrow's threats today. Free of
vendor pitches, the Briefings are designed to be pragmatic regardless of your
security environment. Featuring 36 hands-on training courses and 10 conference
tracks, networking opportunities with over 2,500 delegates from 40+ nations.

http://www.blackhat.com
------------------------------------------------------------------------------